The classic problem with encrypting values is that somewhere - somehow - you have to store
or acquire the secret/private key or password so that the server can decrypt the value.
For a server starting up, it's hard to imagine a place that a key/password could be
stored that would be more secure than where its regular configuration could be stored.
While this module would definitely make it easer, in some ways, to get the tools needed to
perform the encryption/decryption, it does nothing to solve this basic problem.
View the original post :
http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4204037#...
Reply to the post :
http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...